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Amendments tn the Claims! 

This listing of claims will replace all prior version, and listings, of claims in the 
application, 
l isting of Claims: 




reviously amended) A method for protecting software from unauthorized use on a 
computer system using an external security device, the method comprising the steps of: 

(a) encrypting the software to be protected using an encryption key, creating 
encrypted software; 

(b) authorizing use of the software on the computer system by generating the 
encryption key within the security device using inform^ion supplied from the 
software; and 

(c) sending the encryption key from the secuj?fty device to the computer 
system for decryption of the software. 



2 (Original) The method of claim 1 wherein step (a/further includes the steps of: 

(i) using at least first aiyfl second pieces of information to generate an 
encryption key; 

(ii) associating thirst piece of information with the encrypted 
software; and 

(iii) storing th£ second piece of information in the security device. 



3 (Original) The method of claim 2 wherein step (b) further includes the steps of: 
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(i) sending the first piece of information associated/with the encrypted 



software to the security device, and 



(ii) using the first piece of information and ther second piece of 



information to generate the encryption key in tne security device. 



4 (Currently Amended) The method of claim +-2Jurther incLfiding the steps of: 

generating a second encryption key using the first arid second pieces of information; 

providing the second encryption key with the enaypted software; 

during software authorization, generating a-the/second encryption key on the security 
device using the first and second pieces of information; 

using the second encryption key to encryrit the first encryption key generated on security 
device prior to transmitting the first encryptiorr key to the computer system; and 

when the encrypted first encryption Icey is received on the computer system, using the 
second encryption key provided with the/encrypted software to decrypt the first encryption key. 

5 (Currently Amended) The metWod of claim i-2_further including the steps of: 

generating a random number on the computer system; 

transmitting the random number to the security device along with the first piece of 
information; / 

scrambling the ^ectrrity encryption k ey generated by the security device by performing a 
reversible mathematical operation on the encryption key using the random number; 

encrypting the scrambled encryption key and transmitting the encrypted scrambled 
encryption key to the computer system; and 

performing a reverse of the reversible mathematical operation performed within the 
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security device using the random number to 
scrambled encryption key is decrypted on the 
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4escramble the encryption key after the encrypted 
computer system. 



6 (Currently Amended) The method of clai: n f-Zfurther including the step of: using an 



initialization vector and a dynamic key as the 



7 (Original) The method of claim 6 further 
encryption key and a communications key as 

8 (Original) The method of claim 7 further 



first and second pieces of information. 

including step of: using a security key as the 
the second encryption key. 



including the step of: embedding a mathematical 
algorithm within the security device to create the communications key and the security key from the 
dynamic key and the initialization vector. 



9 (Original) The method of claim 8 further including the step of: including the encrypted 
software with an authentication program, wperein the authentication program is embedded within a 
separate security processor provided in conjunction with the co-processors. 

10 (Original) The method of claim 9 further including the step of: sharing memory between the 
security processor and the co-processors epd decrypting the encrypted software in the shared 
memory. 

1 1 (Original) The method of claim 10 jurther including the step of: preventing the software from 
running in any of the co-processors unless the software has first been decrypted by the security 



processor. 
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12 (Original) The method of claim 6 wherei^ the initialization vector is created from a checksum 
of encrypted software to be protected. 



13 (Original) The method of claim 6 further 
the software and transferring the product ID to 
vector. 



including the step of: associating a product ID with 
Jie security device along with the initialization 



14 (Original) The method of claim 13 further includes the step of: providing multiple storage 
locations within the security device to enable storing multiple dynamic keys and corresponding 
product IDs. 



15 (Original) The method of claim 14 ftirthei 
locate and select the appropriate dynamic key 
authorization request. 



includes the step of: using the product ID code to 
vithin the security device when receiving an 



1 6 (Original) A method for protecting soft jvare from unauthorized use on a computer system, 
the method comprising the steps of: 

(a) using at least first anp second pieces of information to generate an 
encryption key; 

(b) encrypting the software using the encryption key; 

(c) associating the first piece of information with the encrypted software; 

(d) storing the second j iece of information in a security device; and 

(e) authorizing use of t le software after the encrypted software is loaded on 
the computer system and tl e security device is coupled to the computer system by, 
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(i) sending file first piece of information associated with the encrypted 
software to the si jcurity device, 

(ii) using the first piece of information and the second piece of 
information to g( merate the encryption key in the security device, 



(iii) transmit! 



computer systeir , and 



ng the encryption key from the security device to the 



(iv) decryptir 
on the compute 



g the encrypted software with the encryption key for use 
system. 



1 7 (Currently Amended) The method pf claim M&further including the step of: 

(v) discarding the encryption key after decryption of the encrypted software. 



18 (Original) The method of claim 1 7 further including the steps of: 

generating a second encryption key using the first and second pieces of information; 

providing the second encryption key with the encrypted software; 
during software authorization, generating the second encryption key on the security device using 
the first and second pieces of information; 

a using the second encryption key to encrypt the first encryption key generated on security 
device prior to transmitting the fir st encryption key to the computer system; and 

when the encrypted first e lcryption key is received on the computer system, using the 
second encryption key provided with the encrypted software to decrypt the first encryption key. 



19 (Currently Amended) The method of claim i-l£_further including the steps of: 
generating a random nurr ber on the computer system; 
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transmitting the random number to the security device along with the first piece of 



by the security device by performing a reversible 



information; 

scrambling the encryption key generated! I 
mathematical operation on the encryption key using the random number; 

and transmitting the encrypted scrambled 



encrypting the scrambled encryption ke>| ; 
encryption key to the computer system; and 

performing a reverse of the reversible mathematical operation performed within the 
security device using the random number to descramble the encryption key after the encrypted 
scrambled encryption key is decrypted on the co nputer system. 

20 (Original) The method of claim 16 further including the step of: using an initialization vector 
and a key as the first and second pieces of information. 



21 (Original) The method of claim 20 further 
encryption key and a communications key as t 



ncluding steps of: using a security key as the 
e second encryption key. 



22 (Currently Amended )A method for protec ing software from unauthorized use on a computer 
system, the method comprising the steps of: 

(a) creating an initialization vector and a dynamic key; 

(b) using the initialization vector and the dynamic key to generate a security 
key; 

(c) using the security key ajid the initialization vector to generate a 
communication key; 

(d) encrypting software usihg the security key to create encrypted software; 
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(e) creating a software package comprising the initialization vector, Ae 
encrypted software, the communications key, and an authentication program; 

(f) storing the dynamic key in a security device; 

(g) authorizing use of the software after the software package has been loaded 
on the computer system and the security device coupled to )ne computer system 
by 

(i) sending the initialization vector to the Security device, 

(ii) in the security device, using the initialization vector and the store 
stored dynamic key to generate the security key and communication key, 

(iii) encrypting the security key usjng the communication key, 

(iv) sending the encrypted secijnty key to the computer system as a 
response, 

(v) using the communications key in the software package to decrypt 
encrypted security key, and 

(vi) using the security key to decrypt the encrypted software for use on 
the computer system. 



23 (Original) The method of claim 22 further including the steps of: 
generating a random ndmber on the computer system; 
transmitting the raiKiom number to the security device; 

scrambling the Security key generated by the security device by performing a reversible 
mathematical operation on the security key using the random number; 

encrypting the scrambled encryption key and transmitting the encrypted scrambled 
security key tor the computer system; and 
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performing a reverse of the reversible mathematical operation performed Whin the 
security device using the random number to descramble the security key after tt^e encrypted 
scrambled security key is decrypted on the computer system. 

24 (Previously amended) A computer-readable medium containing n^gram instructions for 
protecting software from unauthorized use on a computer system u^ing an external security 
device, the program instructions for: 

(a) encrypting the software to be protectedydsing an encryption key, creating 
encrypted software; 

(b) authorizing use of the software onAhe computer system by generating the 
encryption key within the security devj£e using information supplied from the 
software; and 

(c) sending the encryption ke^ from the security device to the computer 
system for decryption of the software. 

25 (Original) The computer-readable q/edium of claim 24 wherein instruction (a) further 
includes the instructions for: 

(i) usin§ at least first and second pieces of information to generate an 
encryption key; 

(ii) / associating the first piece of information with the encrypted 
software; and 

li) storing the second piece of information in the security device. 
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26 (Original) The computer-readable medium of claim 25 wherein instruction (b) ^rther 
includes the instructions for: 

(i) sending the first piece of information associjM&d with the encrypted 
software to the security device, and 

(ii) using the first piece of information afid the second piece of 
information to generate the encryption key in the security device. 

27 (Original) The computer-readable medium of clainV26 further including the instructions for: 

generating a second encryption key using thetfirst and second pieces of information; 
^ providing the second encryption key with/he encrypted software; 

during software authorization, generating a second encryption key on the security device 
using the first and second pieces of information; 

a using the second encryption key to encrypt the first encryption key generated on security 
device prior to transmitting the first Encryption key to the computer system; and 

when the encrypted first encryption key is received on the computer system, using the 
second encryption key provided with the encrypted software to decrypt the first encryption key. 

28 (Original) The cor^puter-readable medium of claim 24 further including the instructions for: 

generating a/random number on the computer system; 

transmitting the random number to the security device along with the first piece of 
information; 

scrambling the security key generated by the security device by performing a reversible 
mathematical operation on the encryption key using the random number; 
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encrypting the scrambled encryption key and transmitting the encrypted scrambled 
encryption key to the computer system; and ^ 

performing a reverse of the reversible mathematical operation performed within the 
security device using the random number to descramble the encryption^ey after the encrypted 
scrambled encryption key is decrypted on the computer system. 

29 (Previously amended) The computer-readable medium 0/ claim 25 further including the 
instruction for: using an initialization vector and a dynarrpc key as the first and second pieces of 
information. 

( 

30 (Original) The computer-readable mediumyOf claim 29 further including instruction for: 
using a security key as the encryption key arjd a communications key as the second encryption 
key. 

3 1 (Original) The computer-readable medium of claim 30 further including the instruction for: 
embedding a mathematical algorithm within the security device to create the communications key 
and the security key fromine dynamic key and the initialization vector. 

32 (Original) Th/computer-readable medium of claim 31 further including the instruction for: 
including the encrypted software with an authentication program, wherein the authentication 
program is embedded within a separate security processor provided in conjunction with the co- 
processors. 
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33 (Original) The computer-readable medium of claim 32 further including the induction for: 
sharing memory between the security processor and the co-processors and decrygfting the encrypted 
software in the shared memory. / 

34 (Original) The computer-readable medium of claim 33 further including the instruction for: 
preventing the software from running in any of the co-processor^unless the software has first been 
decrypted by the security processor. / 

35 (Original) The computer-readable medium of claim 25 wherein the initialization vector is 
created from a checksum of encrypted software to pt protected. 

36 (Original) The computer-readable medium of claim 29 further including the instruction for: 
associating a product ID with the software and transferring the product ID to the security device 
along with the initialization vector. / 

37 (Original) The computer^eadable medium of claim 36 further includes the instruction for: 
providing multiple storage/locations within the security device to enable storing multiple dynamic 
keys and correspondin^product IDs. 

38 (Original) TJie computer-readable medium of claim 37 further includes the instruction for: 
using the product ID code to locate and select the appropriate dynamic key within the security 
device wheif receiving an authorization request. 

39 (Original) A computer software authentication system comprising: 
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a computer system; / 
a software package loaded on the computer system that includes, 

an encrypted software program encrypted with a ftfst encryption key, 

an authorization program, / 

a first key of a keyset, and / 

a second encryption key; and / 

a security device in communication With the computer system that includes a second key 

of the keyset and mathematical algorithms, 
wherein when the software package i^executed the computer system, the encrypted software 
program is authenticated by, / 

transferring the first key of the keyset from the authorization program to the security 
device, / 

generating in the/ecurity device the first and second encryption keys using the keyset and 
the mathematical algorithms, 

enciyptingvthe first encryption key using the second encryption key, 

transferring the encrypted first encryption key from the security device to the computer 
system, / 

decrypting the encrypted first encryption key on the computer system using the second 
encryption key included in the software package, and 

/ using the first encryption key to decrypt the encrypted software for execution on the 
Computer system. 
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